CVSS 3.1 Score 8.8 of 10 (high)


Published Oct 3, 2023
Updated: Oct 4, 2023


CVE-2023-39222 is an OS command injection vulnerability found in FURUNO SYSTEMS wireless LAN access point devices. This vulnerability allows an authenticated user to execute arbitrary OS commands that are not intended to be executed from the web interface by sending a specially crafted request. The affected products and versions include ACERA 1320, ACERA 1310, ACERA 1210, ACERA 1150i, ACERA 1150w, ACERA 1110, ACERA 1020, ACERA 1010, ACERA 950, ACERA 850F, ACERA 900, ACERA 850M, ACERA 810, and ACERA 800ST when running in ST (Standalone) mode. The risk score is rated as high (65) with a base severity of high (8.8). The potential danger to an organization includes the compromise of integrity and confidentiality of data due to unauthorized execution of OS commands. To remediate this vulnerability, users should update their firmware to the latest versions provided by FURUNO SYSTEMS.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-39222 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options